last executing test programs:

32.889473142s ago: executing program 2 (id=183):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="2e00000010008188040f80ec59acbc043edd36fe76658c4f4c169f3a96d813010048100000005e1406020004000000ad1907e302a6000000002520934859069687aa0c5acd3772", 0x47}], 0x1}, 0x20)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'})
socket$rxrpc(0x21, 0x2, 0x2)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=<r4=>0x0)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r2, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="02002dbd7000fbdbdf250f000000050014000000000008000100", @ANYRES32=r4, @ANYBLOB="4d0e27", @ANYRES32=0x0, @ANYBLOB="05001400260000000e0014006970366772657461700000000e0014006970366772657461700000000e001400697036677265746170000000"], 0x64}, 0x1, 0x0, 0x0, 0x40880}, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000000c0)={0x7ff, 0x7, 0x6, 0xa5e2}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r8 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r8, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e)
setsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f00000004c0), 0x4)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r10, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={<r11=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x7a, &(0x7f0000000340)={r11, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r12=>0x0]}, &(0x7f0000000040)=0x8)
sendmmsg$inet_sctp(r6, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x208, 0x103, 0x7}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}], 0x40, 0x4c000}], 0x1, 0x8010)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000000800)={r12, 0x4, 0x1, 'u'}, 0x9)
sendmmsg(r8, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b80)="8d94e6323e0716", 0x7}], 0x1}}], 0x1, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="800000001000010427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000540012800e000100697036677265746170000000400002801400070000000000000000000000ffffac1414bb06001800020000000500170000000000080014000500000005000800040000000508ade016d8505c4155b01f0ec90016", @ANYRES32=r7, @ANYBLOB], 0x80}}, 0x0)

32.818220134s ago: executing program 2 (id=184):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r2=>0x0})
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r4)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf25410000000e0001006e1d368fc50525181f0000000f0002006e657464657673696d3000001200870001000000726f7073000000005ebe74a1cc97275bafc96d0a0740f31312c58eea824c7142f0e3ec7ccaaa74fef8ae1f02000000000000005a0cf2aa913e2f07cb11"], 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x40)
recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{0x0}, {&(0x7f0000000740)=""/73, 0x49}, {0x0}, {0x0}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/108, 0x6c}], 0x6}, 0x6}], 0x1, 0x2040, 0x0)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001c00)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="1400350064756d6d793000"/20], 0x3c}, 0x1, 0x0, 0x0, 0x8000080}, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r10 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000180)={'bridge_slave_1\x00'})
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000010000104000000000000000100000000", @ANYRES32=0x0, @ANYRES64=r10, @ANYRES32=r2, @ANYBLOB="3bc8776f11124b03e2693671169ca6627789f9ee00fd0b496a8278c8fe904d8c77dcffdfe9790a436868b6d65db6d53fec348ab74f31c955ce8582908fb80a4c0901dda3deb66ee5565f2e47062585ce4bbe6acb4aec847317cc4c20000628900300000079b42e073e3a5f12f5a543fae839e839aabfef7e0eff6fc7e26fc4c74e25a24d15a92d1e0f77697c22fd7a19aec33d7fb84fd7a6ccc981e96363719e4fde457102da2fd3f770cdd1b0f7f26d5dd257ce38559946ea2d553c4d5573d5938d3b233e01a0c1990c02c75babb8e889e9b32104115ca2c453cca9300fafa0493c8b13e3e6b293d36e229d832c3a43f37d07064429fdd7c56d5b861ff666669fb7efa5f269728ae2e80f3fe0db04b49adbea596d8ca7ca706468af0924a74b99a6cf9eae1c4b31f0772a5d1b5c6f1f72245456224bda790a0c93fcc43aebe82554c809cb9064383bbd2e7f10d3c24d8c332c9aeaddff656c7a2efbd2096e6555507469e35c3f70167ce51304e4075e89722dec4dcac5d6c9f107baf2cd7493a5bf5044"], 0x54}, 0x1, 0x0, 0x0, 0x20081}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
syz_emit_ethernet(0x76, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60f81fcb00403a00fc000000000000000000000000000001ff02000000000000000000000000000104029078000000f8054207740eadb500604aa1d300000000fc01000000000000000000000000000000000000000000000000ffff7f0000012f0004000c28fe008700000000000000"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r11}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x50)
listen(r0, 0x9)

32.810942244s ago: executing program 2 (id=185):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@gettaction={0x74, 0x32, 0x20, 0x70bd25, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffe3}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xce}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4809}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
getuid()
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000580)=0x3, 0x4)
sendmsg$nl_generic(r2, 0x0, 0x801) (async)
sendmsg$netlink(r1, 0x0, 0x0) (async)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) (async)
write(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10) (async)
r4 = socket$netlink(0x10, 0x3, 0x1)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="34100000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r8=>0x0}) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r9, 0x4040942c, &(0x7f00000000c0)={0x0, 0x295840c6, [0x7f, 0x8, 0x2800000, 0x6, 0x0, 0x5]}) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000660000000800030040cbc6de616137f61a20de4c66134f1352ce0683291cff87906c04de19ad8d2c42238d3e", @ANYRES32=r8, @ANYBLOB="080026006c0900000800b70099000000"], 0x2c}}, 0x0) (async)
sendmmsg(r0, 0x0, 0x0, 0x40) (async)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r10, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x3, {0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80000001}}}, 0x3a) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x20, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x801)

32.810140213s ago: executing program 2 (id=186):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f00000052c0)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000cc0)=""/141, 0x8d}, {&(0x7f0000006080)=""/4074, 0xfea}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f00000001c0)=""/54, 0x36}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x20008}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000740)=""/115, 0x73}, {&(0x7f00000007c0)=""/119, 0x77}, {&(0x7f0000000840)=""/81, 0x51}, {&(0x7f00000008c0)=""/140, 0x8c}, {&(0x7f0000000980)=""/252, 0xfc}, {&(0x7f0000000540)=""/49, 0x31}], 0x6, &(0x7f0000003e00)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000000dc0)=@generic, 0x80, &(0x7f0000001400)=[{&(0x7f0000000e40)=""/223, 0xdf}, {&(0x7f0000000fc0)=""/166, 0xa6}, {&(0x7f0000001100)=""/212, 0xd4}, {&(0x7f0000001200)=""/108, 0x6c}, {&(0x7f0000001280)=""/126, 0x7e}, {&(0x7f0000001340)=""/95, 0x5f}, {&(0x7f00000013c0)=""/57, 0x39}], 0x7, &(0x7f0000001480)=""/175, 0xaf}, 0x9}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000015c0)=""/27, 0x1b}, {&(0x7f0000001640)=""/96, 0x60}, {&(0x7f00000016c0)=""/218, 0xda}], 0x3, &(0x7f0000001800)=""/222, 0xde, 0x740e}, 0x4}, {{&(0x7f0000000a80)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001980), 0x0, &(0x7f0000004e00)=""/181, 0xb5}, 0xb68d}, {{&(0x7f0000004ec0)=@generic, 0x80, &(0x7f0000005180)=[{&(0x7f0000004f40)=""/179, 0xb3}, {&(0x7f0000000bc0)=""/240, 0xf0}, {&(0x7f0000005100)=""/124, 0x7c}, {&(0x7f00000019c0)=""/21, 0x15}], 0x4, &(0x7f00000051c0)=""/247, 0xf7}, 0x6}], 0xc, 0x40002000, 0x0)

32.803153616s ago: executing program 2 (id=188):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="3b000300010006", 0x7)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x1b, &(0x7f0000000080)="109f1fe3e5d24fb7b63420306fc8a471c377ad9a", 0x14)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x90)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

32.669954812s ago: executing program 2 (id=190):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x16, 0x6, 0x3, 0x3}]})
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0)
tee(r1, r4, 0x8f5, 0x100000000000000)
write$cgroup_type(r4, &(0x7f0000000180), 0x9)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000240)=0x2, 0x4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
close(r5)
splice(r3, &(0x7f0000000340)=0x4, r2, &(0x7f0000000500), 0xcd4f, 0x1)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000d150f39bc022f1000000000000000085400000220000008500"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="38f3ff00d84a113e6098946583ae3d153d76ce45aacf400c84e5cac3609878ca3b27eb87cc1abe07d4d9bf35141f58fd17", @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230", @ANYBLOB="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", @ANYRES8=r6, @ANYRES16=r6], 0x38}, 0x1, 0x0, 0x0, 0x4040810}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000200)=0x1000000000000, 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r9, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'gre0\x00'})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r10 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r10, &(0x7f0000000100)={0x1d, r11, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18)

31.141244916s ago: executing program 1 (id=220):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x110, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1a22, 0x25}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x8}, @IFLA_GRE_IKEY={0x8, 0x4, 0x10}, @IFLA_GRE_FLAGS={0x8, 0xd, 0xff}]}}}, @IFLA_VFINFO_LIST={0xb8, 0x16, 0x0, 0x1, [{0x4}, {0x88, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x5, 0x3, 0xba3}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffffbff, 0xd}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x401, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1000, 0x400}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xaf9, 0xfffffff5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1a, 0x80000000}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xe7, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6ce, 0x92}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x200080, 0x6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0x6}}]}, {0x4}]}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x110}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') (async)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x110, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1a22, 0x25}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x8}, @IFLA_GRE_IKEY={0x8, 0x4, 0x10}, @IFLA_GRE_FLAGS={0x8, 0xd, 0xff}]}}}, @IFLA_VFINFO_LIST={0xb8, 0x16, 0x0, 0x1, [{0x4}, {0x88, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x5, 0x3, 0xba3}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffffbff, 0xd}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x401, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1000, 0x400}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xaf9, 0xfffffff5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1a, 0x80000000}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xe7, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6ce, 0x92}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x200080, 0x6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0x6}}]}, {0x4}]}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x110}}, 0x0) (async)

31.139704129s ago: executing program 1 (id=221):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x78}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00'}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r5, 0x0, 0x180000}, 0x18)
socket$netlink(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x8000)
bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8faa"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r10 = socket$netlink(0x10, 0x3, 0x10)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0100001a0007000000000000000000ff020000000000e6ff00000000000001e0000002000000000000000000000000fffc0000000000000000800002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e09000000000000070000000000000000000000000000000000040001000000e80a000000000000000000000a00020070000000000000004c0012"], 0x13c}}, 0x4000084)
sendmsg$DEVLINK_CMD_PORT_GET(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000350000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000080000"], 0x64}}, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r12, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000800)=ANY=[@ANYBLOB="04020000130a050000000000000000000000000708000340000000010900020073797a30000000000900010073797a30"], 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x24048084)

31.136470498s ago: executing program 1 (id=222):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd0000ffdbdf250e000000340002800800080006000000060002004e200000080007000800000005000d000100000008000600090000000800080009000100"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

31.07019653s ago: executing program 1 (id=223):
socket$netlink(0x10, 0x3, 0x0)
socket$isdn_base(0x22, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00'})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r2}, 0x0, &(0x7f0000000080)='%pS    \x00'}, 0x20)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x800, 0x0, @local, 0x7}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, 'L\x00ZtC\x00', "3eda254a1c07cb407b4000", "29469d6b", "5350b7add205a3ec"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000c00)=@ccm_128={{0x303}, "e12dc20a892d7dde", "a52cbf2aa84c7c9e38b06f060000001c", "296258a3", "ebee76f27293fe23"}, 0x28)
mmap(&(0x7f000001d000/0x13000)=nil, 0x13000, 0x1000002, 0x4000010, r2, 0x5c2a7000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0)
sendmsg$rds(r2, &(0x7f0000000800)={&(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000200)=""/188, 0xbc}, {&(0x7f0000000300)=""/3, 0x3}, {&(0x7f0000000340)=""/31, 0x1f}, {&(0x7f0000000380)=""/209, 0xd1}], 0x4, &(0x7f0000000700)=[@fadd={0x58, 0x114, 0x6, {{0x4, 0xb7}, &(0x7f0000000600), &(0x7f0000000640)=0x10000, 0x0, 0x6, 0x80, 0x6, 0x50, 0x3}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x2}, @fadd={0x58, 0x114, 0x6, {{0x2, 0x5}, &(0x7f0000000680)=0xb198, &(0x7f00000006c0)=0x800, 0x3, 0x3ff, 0x5, 0x6, 0x70, 0x2}}, @rdma_dest={0x18, 0x114, 0x2, {0x1, 0x7}}], 0xe0, 0x4004}, 0x20004000)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r4, 0xac9d4000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x10010, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
socket(0x10, 0x800, 0x3)
socket$packet(0x11, 0x3, 0x300)
syz_80211_inject_frame(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)

30.720687137s ago: executing program 0 (id=226):
syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6ea090000000000000100000000e01f00000000000000ff0200000000000000000000000000010001c204"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xb}], 0x10, 0x7ff}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000006ac0), 0x6, 0x640400c0)
r4 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@getrule={0x14, 0x22, 0x20, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x3a4, 0x24, 0xd0f, 0x470bd2d, 0x1100000, {0x60, 0x0, 0x0, r9, {0x0, 0xffff}, {0x10, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1e8, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x3}, @TCA_GRED_PARMS={0x38, 0x1, {0x3, 0x81, 0x0, 0x4, 0x5, 0x1, 0x9, 0xfff, 0x101, 0xd99, 0x13, 0x1e, 0xe, 0x0, 0x80000000, 0x3}}, @TCA_GRED_STAB={0x104, 0x2, "945ea989c4470504a580a5129619c00429fb5d32ee16a6c480eae7f47ce74d5bb90e2ffa10e69bce50f2018deaa827216b52e5bd8a5adbaa0b11b9be0fd170607f3638e38b76f10d4b822b10b36dd0da3feb35b7cf09dd300155890b4917c56232a83475ce8a3bbf655bc0d45da64d446846078cec4456c9356d1dea70ac300edb8a330f99c446f8c5b7c500052740182201d07568e94e15c9a27115d2d03705ec3a6f0551241e82cfffcb724d8e79f30a431424d3a4201729e4512f89f83953ddc10fe3b4035614ef1bc3c56cb643ff85b268fac00c6e293b312599388e0e25eee48a083fc6a9e008fc16b075a47030bc0260f4c40e9555c537e25378c2ca2c"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x8}, @TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x6, 0x4c5f, 0xb, 0x3, 0xfffffff8, 0xb, 0x3, 0x3, 0x0, 0x2, 0x1a, 0xb, 0x3, 0x5, 0x2}}, @TCA_GRED_DPS={0x10, 0x3, {0x2, 0x5, 0x0, 0x3}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x4}, @TCA_GRED_PARMS={0x38, 0x1, {0x300, 0x5161, 0x0, 0xd, 0xa3da, 0x7, 0x7, 0x800, 0x96cdf6, 0x3, 0x1f, 0x16, 0xb, 0x1, 0x9e, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x1, 0xc, 0x0, 0x1}}]}}, @TCA_STAB={0x18c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x9, 0x2, 0x0, 0x0, 0x1, 0x8, 0x3}}, {0xa, 0x2, [0x7, 0x100, 0xffff]}}, {{0x1c, 0x1, {0x5, 0x4, 0x3, 0x80000001, 0x1, 0x6, 0xffff, 0x8}}, {0x14, 0x2, [0x1, 0x7ff, 0xe5a, 0x8, 0x7, 0xeb8, 0x3, 0x6]}}, {{0x1c, 0x1, {0x4, 0x2, 0xa8b, 0xb, 0x2, 0x1, 0x5}}, {0x4}}, {{0x1c, 0x1, {0x7, 0xff, 0x4, 0x0, 0x1, 0x100, 0x5, 0x5}}, {0xe, 0x2, [0x8b, 0x8001, 0x7ff, 0xfff7, 0x2]}}, {{0x1c, 0x1, {0x80, 0x1c, 0x400, 0x8fa, 0x0, 0x6, 0x2, 0x1}}, {0x6, 0x2, [0xa5]}}, {{0x1c, 0x1, {0xd, 0x7, 0x9000, 0x200, 0x0, 0x1, 0x80, 0x6}}, {0x10, 0x2, [0x7, 0x4e, 0xbba5, 0x4, 0x7, 0x400]}}, {{0x1c, 0x1, {0x5, 0x3, 0x4fb, 0x7, 0x2, 0xd500, 0x64, 0x3}}, {0xa, 0x2, [0x1000, 0x1, 0x201]}}, {{0x1c, 0x1, {0x3, 0xf6, 0x1, 0x1, 0x0, 0xffffffff, 0x41ff, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x2, 0x9, 0x0, 0x0, 0x2, 0x2, 0x0, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x7, 0x6, 0x0, 0x6, 0x2, 0x0, 0x2, 0x1}}, {0x6, 0x2, [0x9]}}]}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x2404c0c1}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000000000604000000080000000100000ff7ffffff0400000001000000fffffff70030615f5f002e305f"], 0x0, 0x46, 0x0, 0x1}, 0x28)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1e00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="6a58faae97be0aee752c15d8424bda7e80a2245af4032c2cc0a4f7f3337a5e1d68fd1d4cd963f516c2a53eb9d72649031e2125f5e0ff237f0a9c79e1fc3184f9c14b082780434d4eaae699befaf0ed0d67b6905a25f5bfb2614a41d288102255298d0e1257381090359c051c6f859c1ad47404e787285a7f20e8d143f9466040249fe60eeb6ffac3a46c2cad3a44235266437bb70000000000000000", @ANYRES64=0x0], 0x20)
sendmsg$nl_route_sched(r10, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000a000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000300000000002604fdffff02000016010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, 0x0, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_ECHOREQ(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r13, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x90)

30.641027321s ago: executing program 0 (id=227):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000e00060008000300", @ANYRES32=r6, @ANYBLOB="0800050007000000"], 0x24}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES32=r4], 0x0}, 0x94)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r9 = accept4(0xffffffffffffffff, &(0x7f00000007c0)=@ax25={{0x3, @bcast}, [@remote, @default, @default, @remote, @netrom, @default, @bcast, @rose]}, &(0x7f0000000600)=0x80, 0x80800)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r10, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8408000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r11, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x20004000}, 0x14)
socketpair(0xa, 0xa, 0x1, &(0x7f0000000140)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r15=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="030300000000000000000600140008000300", @ANYRES32=<r16=>r15], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r12, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="1a01bd7000fddbdf254e00000008003100f9ffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20048000)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000000280)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="00eb31d8000000000100000037c1c0ba0400", @ANYRES16=r14, @ANYBLOB="04002abd7000fcdbdf2509000000050038000000000005002f000000000008003b00ffffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x24000401}, 0x100048c0)
syz_emit_ethernet(0x3e, &(0x7f0000000840)=ANY=[@ANYRESHEX=r11, @ANYRES16=0x0, @ANYRESOCT=r16, @ANYRES64, @ANYRESOCT=r14, @ANYRESDEC=r7, @ANYRESDEC=r15, @ANYRES16=r9, @ANYRESDEC=r15], 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x41, &(0x7f0000000800), 0x1}, 0x4040004)
socket$pppoe(0x18, 0x1, 0x0)

30.6389877s ago: executing program 0 (id=228):
r0 = socket(0x28, 0x80000, 0x3)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
splice(r1, 0x0, r2, 0x0, 0x10500, 0x0)
bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x1a000, 0x0, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080)={0x71, 0x3, 0x4, 0x3}, 0x8)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, 0x0, &(0x7f0000000100)=0x5a)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

30.571526567s ago: executing program 0 (id=229):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='ext4_discard_preallocations\x00', r1, 0x0, 0x800000000005}, 0x18)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r2, &(0x7f0000000540)={0x23, 0x2, 0x8, 0x6}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x4, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000080)={'dummy0\x00', 0x1})

30.570966342s ago: executing program 0 (id=230):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0)
setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000080)=0x8, 0x4)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0)

30.48128626s ago: executing program 0 (id=231):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x50, 0x0, 0x9, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fff}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x48000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r7}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
r12 = socket$unix(0x1, 0x1, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
connect$unix(r8, &(0x7f0000001d00)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
recvmmsg(r13, &(0x7f0000001c40)=[{{&(0x7f0000000540)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/25, 0x19}, {&(0x7f00000005c0)=""/174, 0xae}, {&(0x7f00000006c0)=""/255, 0xff}], 0x3, &(0x7f00000007c0)=""/183, 0xb7}, 0x2}, {{&(0x7f0000000880)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000900)}, {&(0x7f0000000940)=""/21, 0x15}, {&(0x7f0000000980)=""/76, 0x4c}, {&(0x7f0000000a00)=""/246, 0xf6}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)}], 0x6, &(0x7f0000001bc0)=""/66, 0x42}, 0x9}], 0x2, 0x2000, &(0x7f0000001cc0)={0x77359400})
sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x47, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xfffffffffffffffe, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0xffffffff, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x80008, 0x5, 0x5f82, 0x6, 0x9, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0x2, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

30.4809254s ago: executing program 1 (id=232):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r3, &(0x7f0000000280), 0x0}, 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x1, 0x0, {0xa}}, 0x14}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000002140)='dctcp\x00', 0x6)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0xd1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x104}, 0x1c)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8)
connect$pppl2tp(r6, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f0000000180))
r8 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001400050925bd5000fcdbdf250a06ff004e"], 0x4c}}, 0x4814)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r9=>0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9}, 0x90)
r10 = socket(0x2, 0x3, 0xff)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000340), &(0x7f0000000380)=0x4)
setsockopt$sock_int(r10, 0x1, 0x5, &(0x7f0000000180)=0x5, 0x4)
sendmmsg$inet(r10, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}], 0x1, 0x4800)
r11 = socket$key(0xf, 0x3, 0x2)
accept4(r11, 0x0, 0x0, 0x800)
r12 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000180)={'team0\x00', <r13=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r13, 0x4110}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x2}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4008000)

30.480556205s ago: executing program 1 (id=233):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000100000000000000000000009c000100000000009500000000000000ba366fa13dc70f428fcfb04edafd859ebd80f3484a6a6d050311614a96eb717f874ba4197026ea1598e12791b2be7e2c7631329bac8d33b87cbd59ce31b1c74f26acabe1c3d5be939d9c53d31aaa8fe1a14f12ff33765c7a66286526604784e217db007f1e95ac399f3ba31197b9ac300371102280b57c9ab2cc1ac56fcc0b7e883c11017034b0687203d01788e30ec335e1e3ffb8c1fe2b28a76cb93f90299bdc4f1346c557df71fcce070a8c330f0a74c4f7382b29e6ca8659a8a82027094c8c78e6dc12ead3e8c095b0a41bf2f5e69469af7636"], &(0x7f00000005c0)='syzkaller\x00', 0x6}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="120000000a000000040000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000530e9552795c741dc6293d28659500"/34, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="120000000a000000040000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000530e9552795c741dc6293d28659500"/34, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r5=>0x0})
socket(0x1e, 0x4, 0x0) (async)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) (async)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c)
sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
bind$tipc(r6, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e21, 0xcf07, @empty, 0x24f}}, 0x0, 0x0, 0x10, 0x0, "b2cf46a942a1a2f64cd396c264b1b3fb980632bb28e0fd5bdc0e3d3c6777954e7ec11252a384824eccf4ee5fd8420c8ad9ce5dc6f62732c5b8b060180000f3ffffffffffffff0000001b00"}, 0xd8)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r9=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000380)={0x54, 0x0, 0x1d, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0xfffffffd}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="04f8953b", @ANYRES16=0x0, @ANYBLOB="000429bd7000fddbdf25210000001c002d80080002000200000005000400010000000800020002000000"], 0x30}, 0x1, 0x0, 0x0, 0x2492517f0a76ceb1}, 0xd0)
r10 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r10, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r11 = socket$unix(0x1, 0x2, 0x0)
r12 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r12, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r12, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0)
connect$unix(r11, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ppoll(&(0x7f0000000380)=[{r11, 0x4}], 0x1, 0x0, 0x0, 0x0)
readv(r10, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001000000000000000000000000000208000a00", @ANYRES32=r5, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x20081}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000000000ab79cbe1000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800c001f0007000000000000000c001e000200000000000000"], 0x4c}}, 0x0)

61.875368ms ago: executing program 32 (id=231):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x50, 0x0, 0x9, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fff}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x48000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r7}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
r12 = socket$unix(0x1, 0x1, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
connect$unix(r8, &(0x7f0000001d00)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
recvmmsg(r13, &(0x7f0000001c40)=[{{&(0x7f0000000540)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/25, 0x19}, {&(0x7f00000005c0)=""/174, 0xae}, {&(0x7f00000006c0)=""/255, 0xff}], 0x3, &(0x7f00000007c0)=""/183, 0xb7}, 0x2}, {{&(0x7f0000000880)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000900)}, {&(0x7f0000000940)=""/21, 0x15}, {&(0x7f0000000980)=""/76, 0x4c}, {&(0x7f0000000a00)=""/246, 0xf6}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)}], 0x6, &(0x7f0000001bc0)=""/66, 0x42}, 0x9}], 0x2, 0x2000, &(0x7f0000001cc0)={0x77359400})
sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x47, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xfffffffffffffffe, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0xffffffff, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x80008, 0x5, 0x5f82, 0x6, 0x9, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0x2, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

180.204µs ago: executing program 33 (id=233):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000100000000000000000000009c000100000000009500000000000000ba366fa13dc70f428fcfb04edafd859ebd80f3484a6a6d050311614a96eb717f874ba4197026ea1598e12791b2be7e2c7631329bac8d33b87cbd59ce31b1c74f26acabe1c3d5be939d9c53d31aaa8fe1a14f12ff33765c7a66286526604784e217db007f1e95ac399f3ba31197b9ac300371102280b57c9ab2cc1ac56fcc0b7e883c11017034b0687203d01788e30ec335e1e3ffb8c1fe2b28a76cb93f90299bdc4f1346c557df71fcce070a8c330f0a74c4f7382b29e6ca8659a8a82027094c8c78e6dc12ead3e8c095b0a41bf2f5e69469af7636"], &(0x7f00000005c0)='syzkaller\x00', 0x6}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="120000000a000000040000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000530e9552795c741dc6293d28659500"/34, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="120000000a000000040000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000530e9552795c741dc6293d28659500"/34, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r5=>0x0})
socket(0x1e, 0x4, 0x0) (async)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) (async)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c)
sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
bind$tipc(r6, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e21, 0xcf07, @empty, 0x24f}}, 0x0, 0x0, 0x10, 0x0, "b2cf46a942a1a2f64cd396c264b1b3fb980632bb28e0fd5bdc0e3d3c6777954e7ec11252a384824eccf4ee5fd8420c8ad9ce5dc6f62732c5b8b060180000f3ffffffffffffff0000001b00"}, 0xd8)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r9=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000380)={0x54, 0x0, 0x1d, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0xfffffffd}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="04f8953b", @ANYRES16=0x0, @ANYBLOB="000429bd7000fddbdf25210000001c002d80080002000200000005000400010000000800020002000000"], 0x30}, 0x1, 0x0, 0x0, 0x2492517f0a76ceb1}, 0xd0)
r10 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r10, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r11 = socket$unix(0x1, 0x2, 0x0)
r12 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r12, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r12, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0)
connect$unix(r11, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ppoll(&(0x7f0000000380)=[{r11, 0x4}], 0x1, 0x0, 0x0, 0x0)
readv(r10, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001000000000000000000000000000208000a00", @ANYRES32=r5, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x20081}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000000000ab79cbe1000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800c001f0007000000000000000c001e000200000000000000"], 0x4c}}, 0x0)

0s ago: executing program 34 (id=190):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x16, 0x6, 0x3, 0x3}]})
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0)
tee(r1, r4, 0x8f5, 0x100000000000000)
write$cgroup_type(r4, &(0x7f0000000180), 0x9)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000240)=0x2, 0x4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
close(r5)
splice(r3, &(0x7f0000000340)=0x4, r2, &(0x7f0000000500), 0xcd4f, 0x1)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000d150f39bc022f1000000000000000085400000220000008500"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="38f3ff00d84a113e6098946583ae3d153d76ce45aacf400c84e5cac3609878ca3b27eb87cc1abe07d4d9bf35141f58fd17", @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230", @ANYBLOB="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", @ANYRES8=r6, @ANYRES16=r6], 0x38}, 0x1, 0x0, 0x0, 0x4040810}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000200)=0x1000000000000, 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r9, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'gre0\x00'})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r10 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r10, &(0x7f0000000100)={0x1d, r11, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:46867' (ED25519) to the list of known hosts.
syzkaller login: [   40.249663][ T5768] cgroup: Unknown subsys name 'net'
[   40.374090][ T5768] cgroup: Unknown subsys name 'cpuset'
[   40.376928][ T5768] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   41.532434][ T5768] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   44.490455][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   44.493551][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   44.496478][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   44.499687][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   44.503394][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   44.563400][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   44.566366][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   44.572223][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   44.575976][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   44.580901][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   44.587560][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   44.595231][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   44.600241][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   44.603737][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   44.606758][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   44.652509][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   44.735076][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   44.768900][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.771756][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.775053][ T5834] bridge_slave_0: entered allmulticast mode
[   44.778054][ T5834] bridge_slave_0: entered promiscuous mode
[   44.795684][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.798667][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.801551][ T5834] bridge_slave_1: entered allmulticast mode
[   44.805023][ T5834] bridge_slave_1: entered promiscuous mode
[   44.846396][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.859249][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.884529][ T5834] team0: Port device team_slave_0 added
[   44.887081][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.890419][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.893606][ T5839] bridge_slave_0: entered allmulticast mode
[   44.901003][ T5839] bridge_slave_0: entered promiscuous mode
[   44.905169][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   44.913409][ T5834] team0: Port device team_slave_1 added
[   44.918715][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.921480][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.925092][ T5839] bridge_slave_1: entered allmulticast mode
[   44.927983][ T5839] bridge_slave_1: entered promiscuous mode
[   44.974832][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.979274][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.982003][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.992363][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.001224][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.009564][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.012056][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.021602][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.044447][ T5839] team0: Port device team_slave_0 added
[   45.057445][ T5839] team0: Port device team_slave_1 added
[   45.066482][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.069179][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.071586][ T5840] bridge_slave_0: entered allmulticast mode
[   45.074241][ T5840] bridge_slave_0: entered promiscuous mode
[   45.082948][ T5834] hsr_slave_0: entered promiscuous mode
[   45.085714][ T5834] hsr_slave_1: entered promiscuous mode
[   45.088698][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.091191][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.094194][ T5840] bridge_slave_1: entered allmulticast mode
[   45.096706][ T5840] bridge_slave_1: entered promiscuous mode
[   45.115880][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.119566][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.122282][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.131032][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.142083][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.147284][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.149658][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.158729][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.188851][ T5840] team0: Port device team_slave_0 added
[   45.197398][ T5840] team0: Port device team_slave_1 added
[   45.201047][ T5839] hsr_slave_0: entered promiscuous mode
[   45.203623][ T5839] hsr_slave_1: entered promiscuous mode
[   45.205739][ T5839] debugfs: 'hsr0' already exists in 'hsr'
[   45.207811][ T5839] Cannot create hsr debugfs directory
[   45.232938][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.235412][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.244225][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.253543][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.256255][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.267052][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.314431][ T5840] hsr_slave_0: entered promiscuous mode
[   45.316598][ T5840] hsr_slave_1: entered promiscuous mode
[   45.318982][ T5840] debugfs: 'hsr0' already exists in 'hsr'
[   45.321314][ T5840] Cannot create hsr debugfs directory
[   45.366803][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   45.370517][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   45.386663][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   45.404693][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   45.424719][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   45.429537][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   45.436379][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   45.444676][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   45.459581][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.462260][ T5834] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.464731][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.466977][ T5834] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.481411][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.483857][ T5839] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.486373][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.489199][ T5839] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.495154][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   45.502591][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   45.507256][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   45.511621][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   45.544193][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.547940][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.550463][ T5840] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.553160][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.555569][ T5840] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.565812][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   45.568962][  T977] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.571586][  T977] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.575338][  T977] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.578427][  T977] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.584518][  T977] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.587135][  T977] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.604818][  T977] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.607810][  T977] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.614216][  T977] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.617263][  T977] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.622346][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.651013][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   45.662398][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.665156][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.671021][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.678186][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.680901][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.696025][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   45.708857][ T5839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   45.714371][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   45.731881][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.734873][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.746351][  T977] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.748698][  T977] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.805923][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.854092][ T5834] veth0_vlan: entered promiscuous mode
[   45.858793][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.864561][ T5834] veth1_vlan: entered promiscuous mode
[   45.882550][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.900313][ T5834] veth0_macvtap: entered promiscuous mode
[   45.907778][ T5834] veth1_macvtap: entered promiscuous mode
[   45.924377][ T5840] veth0_vlan: entered promiscuous mode
[   45.934352][ T5840] veth1_vlan: entered promiscuous mode
[   45.937773][ T5839] veth0_vlan: entered promiscuous mode
[   45.945090][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.954634][ T5839] veth1_vlan: entered promiscuous mode
[   45.959823][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.975869][ T5840] veth0_macvtap: entered promiscuous mode
[   45.979909][ T5850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.983967][ T5850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.987761][ T5850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.991528][ T5850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.000498][ T5840] veth1_macvtap: entered promiscuous mode
[   46.023777][ T5839] veth0_macvtap: entered promiscuous mode
[   46.031234][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.036057][ T5839] veth1_macvtap: entered promiscuous mode
[   46.041647][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.057921][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.061404][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.070898][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.074806][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.078445][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.081635][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.094318][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.101963][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.119944][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.125457][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.129827][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.133245][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.142072][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.147174][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.155499][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.159141][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.169205][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   46.173864][  T977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.179890][  T977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.219693][ T5908] netlink: 'syz.0.1': attribute type 5 has an invalid length.
[   46.233300][ T5907] tipc: Started in network mode
[   46.235816][ T5907] tipc: Node identity 6655f08ef87d, cluster identity 4711
[   46.238595][ T5907] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   46.243110][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.246941][ T5908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   46.255326][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.260612][ T5907] tipc: Resetting bearer <eth:syzkaller0>
[   46.278775][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.282334][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.286135][ T5906] tipc: Disabling bearer <eth:syzkaller0>
[   46.359088][ T5914] syzkaller0: entered promiscuous mode
[   46.361758][ T5914] syzkaller0: entered allmulticast mode
[   46.366326][ T5914] tipc: Started in network mode
[   46.368450][ T5914] tipc: Node identity 42f6abb64363, cluster identity 4711
[   46.371833][ T5914] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   46.379699][ T5914] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   46.392499][ T5914] tipc: Resetting bearer <eth:syzkaller0>
[   46.396621][ T5916] netlink: 'syz.2.6': attribute type 1 has an invalid length.
[   46.398708][ T5913] tipc: Resetting bearer <eth:syzkaller0>
[   46.405065][ T5913] tipc: Disabling bearer <eth:syzkaller0>
[   46.444635][ T5922] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET)
[   46.447951][ T5923] netlink: 'syz.0.7': attribute type 2 has an invalid length.
[   46.447958][ T5922] netlink: 'syz.0.7': attribute type 2 has an invalid length.
[   46.455293][ T5923] ave_0: entered promiscuous mode
[   46.542950][   T54] Bluetooth: hci0: command tx timeout
[   46.553995][ T5927] netlink: 'syz.2.8': attribute type 1 has an invalid length.
[   46.584151][ T5931] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9'.
[   46.623345][   T54] Bluetooth: hci2: command tx timeout
[   46.633698][   T54] Bluetooth: hci1: command tx timeout
[   46.738237][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'.
[   46.889165][ T5937] netlink: 156 bytes leftover after parsing attributes in process `syz.2.12'.
[   47.101509][ T5947] IPVS: length: 49 != 24
[   47.110587][ T5947] IPVS: length: 49 != 24
[   47.112412][ T5947] IPVS: length: 49 != 24
[   47.114636][ T5947] IPVS: length: 49 != 24
[   47.116376][ T5947] IPVS: length: 49 != 24
[   47.118161][ T5947] IPVS: length: 49 != 24
[   47.119877][ T5947] IPVS: length: 49 != 24
[   47.121671][ T5947] IPVS: length: 49 != 24
[   47.123783][ T5947] IPVS: length: 49 != 24
[   47.125490][ T5947] IPVS: length: 49 != 24
[   47.127226][ T5947] IPVS: length: 49 != 24
[   47.129019][ T5947] IPVS: length: 49 != 24
[   47.130732][ T5947] IPVS: length: 49 != 24
[   47.132502][ T5947] IPVS: length: 49 != 24
[   47.135018][ T5947] IPVS: length: 49 != 24
[   47.137506][ T5947] IPVS: length: 49 != 24
[   47.139306][ T5947] IPVS: length: 49 != 24
[   47.141004][ T5947] IPVS: length: 49 != 24
[   47.143376][ T5947] IPVS: length: 49 != 24
[   47.145393][ T5947] IPVS: length: 49 != 24
[   47.147333][ T5947] IPVS: length: 49 != 24
[   47.149050][ T5947] IPVS: length: 49 != 24
[   47.150847][ T5947] IPVS: length: 49 != 24
[   47.152571][ T5947] IPVS: length: 49 != 24
[   47.154573][ T5947] IPVS: length: 49 != 24
[   47.156280][ T5947] IPVS: length: 49 != 24
[   47.158003][ T5947] IPVS: length: 49 != 24
[   47.159670][ T5947] IPVS: length: 49 != 24
[   47.161501][ T5947] IPVS: length: 49 != 24
[   47.163347][ T5947] IPVS: length: 49 != 24
[   47.165204][ T5947] IPVS: length: 49 != 24
[   47.167008][ T5947] IPVS: length: 49 != 24
[   47.168805][ T5947] IPVS: length: 49 != 24
[   47.170602][ T5947] IPVS: length: 49 != 24
[   47.172389][ T5947] IPVS: length: 49 != 24
[   47.175053][ T5947] IPVS: length: 49 != 24
[   47.176858][ T5947] IPVS: length: 49 != 24
[   47.178560][ T5947] IPVS: length: 49 != 24
[   47.180260][ T5947] IPVS: length: 49 != 24
[   47.181956][ T5947] IPVS: length: 49 != 24
[   47.186987][ T5947] IPVS: length: 49 != 24
[   47.188774][ T5947] IPVS: length: 49 != 24
[   47.190517][ T5947] IPVS: length: 49 != 24
[   47.192259][ T5947] IPVS: length: 49 != 24
[   47.194212][ T5947] IPVS: length: 49 != 24
[   47.195958][ T5947] IPVS: length: 49 != 24
[   47.197816][ T5947] IPVS: length: 49 != 24
[   47.199593][ T5947] IPVS: length: 49 != 24
[   47.201291][ T5947] IPVS: length: 49 != 24
[   47.203100][ T5947] IPVS: length: 49 != 24
[   47.204812][ T5947] IPVS: length: 49 != 24
[   47.206544][ T5947] IPVS: length: 49 != 24
[   47.208380][ T5947] IPVS: length: 49 != 24
[   47.210047][ T5947] IPVS: length: 49 != 24
[   47.211760][ T5947] IPVS: length: 49 != 24
[   47.213588][ T5947] IPVS: length: 49 != 24
[   47.214939][ T5947] IPVS: length: 49 != 24
[   47.216275][ T5947] IPVS: length: 49 != 24
[   47.217640][ T5947] IPVS: length: 49 != 24
[   47.219060][ T5947] IPVS: length: 49 != 24
[   47.220438][ T5947] IPVS: length: 49 != 24
[   47.221827][ T5947] IPVS: length: 49 != 24
[   47.223268][ T5947] IPVS: length: 49 != 24
[   47.224614][ T5947] IPVS: length: 49 != 24
[   47.226264][ T5947] IPVS: length: 49 != 24
[   47.617681][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.620891][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.650829][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   47.656202][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   47.699155][ T5690] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   47.702034][ T5690] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   47.705934][ T5690] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   47.709416][ T5690] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   47.714534][ T5953] tipc: Started in network mode
[   47.716443][ T5953] tipc: Node identity 6a84d6254c03, cluster identity 4711
[   47.719166][ T5953] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   47.724344][ T5953] syzkaller0: entered promiscuous mode
[   47.726406][ T5953] syzkaller0: entered allmulticast mode
[   47.731860][ T5953] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   47.742454][ T5953] tipc: Resetting bearer <eth:syzkaller0>
[   47.758704][ T5961] tipc: Resetting bearer <eth:syzkaller0>
[   47.762086][ T5961] tipc: Disabling bearer <eth:syzkaller0>
[   47.801520][ T5963] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   47.830237][ T5965] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   47.834442][ T5965] syzkaller0: entered promiscuous mode
[   47.836685][ T5965] syzkaller0: entered allmulticast mode
[   47.843394][ T5965] tipc: Resetting bearer <eth:syzkaller0>
[   47.847600][ T5964] tipc: Resetting bearer <eth:syzkaller0>
[   47.851328][ T5964] tipc: Disabling bearer <eth:syzkaller0>
[   47.979731][ T5973] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   47.984420][ T5972] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   47.987746][ T5973] syzkaller0: entered promiscuous mode
[   47.990401][ T5973] syzkaller0: entered allmulticast mode
[   47.995283][ T5972] tipc: Resetting bearer <eth:syzkaller0>
[   47.998329][ T5971] tipc: Resetting bearer <eth:syzkaller0>
[   48.001695][ T5971] tipc: Disabling bearer <eth:syzkaller0>
[   48.622792][   T54] Bluetooth: hci0: command tx timeout
[   48.702857][ T5846] Bluetooth: hci2: command tx timeout
[   48.705135][   T54] Bluetooth: hci1: command tx timeout
[   49.089043][ T5975] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   49.095377][ T5975] tipc: Resetting bearer <eth:syzkaller0>
[   49.099249][ T5974] tipc: Disabling bearer <eth:syzkaller0>
[   49.241486][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.244704][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.276960][ T5986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.25'.
[   49.284448][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   49.290147][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   49.351988][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.357024][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.362675][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.366610][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.386342][ T5988] Zero length message leads to an empty skb
[   49.579559][ T6006] geneve2: entered promiscuous mode
[   49.645206][ T5995] netlink: 'syz.0.27': attribute type 13 has an invalid length.
[   49.648540][ T5995] netlink: 'syz.0.27': attribute type 17 has an invalid length.
[   49.655210][ T5995] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   49.744846][ T6016] netlink: 256 bytes leftover after parsing attributes in process `syz.2.29'.
[   49.748579][ T6016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.29'.
[   49.765026][ T6017] netlink: 256 bytes leftover after parsing attributes in process `syz.2.29'.
[   49.768882][ T6017] netlink: 24 bytes leftover after parsing attributes in process `syz.2.29'.
[   49.791334][ T6025] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   49.797057][ T6025] syzkaller0: entered promiscuous mode
[   49.799304][ T6025] syzkaller0: entered allmulticast mode
[   49.813544][ T6025] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   49.840867][ T6025] tipc: Resetting bearer <eth:syzkaller0>
[   49.848216][ T6024] tipc: Resetting bearer <eth:syzkaller0>
[   49.852299][ T6024] tipc: Disabling bearer <eth:syzkaller0>
[   50.103368][ T6045] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   50.106681][ T6045] syzkaller0: entered promiscuous mode
[   50.108927][ T6045] syzkaller0: entered allmulticast mode
[   50.117132][ T6045] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   50.122092][ T6045] tipc: Resetting bearer <eth:syzkaller0>
[   50.127434][ T6044] tipc: Resetting bearer <eth:syzkaller0>
[   50.130949][ T6044] tipc: Disabling bearer <eth:syzkaller0>
[   50.211019][ T6047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.35'.
[   50.214974][ T6047] netlink: 'syz.2.35': attribute type 7 has an invalid length.
[   50.218046][ T6047] netlink: 'syz.2.35': attribute type 8 has an invalid length.
[   50.245628][ T6047] netlink: 'syz.2.35': attribute type 10 has an invalid length.
[   50.249249][ T6047] bond0: (slave wlan1): Opening slave failed
[   50.299380][ T6047] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   50.470155][ T6071] warning: `syz.2.38' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   50.479805][  T793] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   50.485725][  T793] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   50.491616][  T793] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   50.492295][ T6071] bridge_slave_0: left allmulticast mode
[   50.498548][ T6071] bridge_slave_0: left promiscuous mode
[   50.500796][ T6071] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.505288][ T6071] bridge_slave_1: left allmulticast mode
[   50.507470][ T6071] bridge_slave_1: left promiscuous mode
[   50.509670][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.516559][ T6071] bond0: (slave bond_slave_0): Releasing backup interface
[   50.521035][ T6071] bond0: (slave bond_slave_1): Releasing backup interface
[   50.526578][ T6071] team0: Port device team_slave_0 removed
[   50.531579][ T6071] team0: Port device team_slave_1 removed
[   50.534292][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   50.536827][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_0
[   50.540347][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   50.543944][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_1
[   50.584492][ T6071] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   50.593048][ T6071] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.597007][ T6071] bond0: (slave wlan1): Opening slave failed
[   50.670425][ T6082] vti0: entered promiscuous mode
[   50.672148][ T6082] vti0: entered allmulticast mode
[   50.703085][   T54] Bluetooth: hci0: command tx timeout
[   50.783196][   T54] Bluetooth: hci1: command tx timeout
[   50.785164][   T54] Bluetooth: hci2: command tx timeout
[   50.905247][ T6088] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.969044][ T6090] bond0: (slave wlan1): Opening slave failed
[   50.972149][ T6091] bond0: (slave wlan1): Opening slave failed
[   50.999278][ T6090] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[   51.005296][ T6090] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[   51.032969][ T6095] bond0: entered promiscuous mode
[   51.034933][ T6095] bond_slave_0: entered promiscuous mode
[   51.037062][ T6095] bond_slave_1: entered promiscuous mode
[   51.039747][ T6095] bond0: left promiscuous mode
[   51.041578][ T6095] bond_slave_0: left promiscuous mode
[   51.044059][ T6095] bond_slave_1: left promiscuous mode
[   51.128518][ T6103] team0: Port device team_slave_0 removed
[   51.235251][ T1278] cfg80211: failed to load regulatory.db
[   51.259620][ T6109] openvswitch: netlink: Message has 1 unknown bytes.
[   51.262261][ T6109] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   51.341372][ T6113] validate_nla: 5 callbacks suppressed
[   51.341382][ T6113] netlink: 'syz.2.52': attribute type 1 has an invalid length.
[   51.424574][ T6115] __nla_validate_parse: 67 callbacks suppressed
[   51.424587][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53'.
[   51.684635][ T6141] netlink: 'syz.1.56': attribute type 13 has an invalid length.
[   51.687617][ T6141] netlink: 'syz.1.56': attribute type 17 has an invalid length.
[   51.717614][ T6141] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.720827][ T6141] 8021q: adding VLAN 0 to HW filter on device team0
[   51.724781][ T6141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   51.787079][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'.
[   51.791276][ T6141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   52.370373][ T6150] netlink: 44 bytes leftover after parsing attributes in process `syz.2.58'.
[   52.396931][ T6153] netlink: 'syz.2.59': attribute type 1 has an invalid length.
[   52.406576][ T6153] 8021q: adding VLAN 0 to HW filter on device bond1
[   52.416728][ T6152] bond1: (slave geneve3): making interface the new active one
[   52.420144][ T6152] bond1: (slave geneve3): Enslaving as an active interface with an up link
[   52.757723][ T6160] syz_tun: entered allmulticast mode
[   52.763061][ T6160] dvmrp8: entered allmulticast mode
[   52.766966][ T6160] syz_tun: left allmulticast mode
[   52.769031][ T6160] dvmrp8: left allmulticast mode
[   52.782773][ T5846] Bluetooth: hci0: command tx timeout
[   52.821342][ T6161] netlink: 'syz.0.61': attribute type 23 has an invalid length.
[   52.862851][ T5846] Bluetooth: hci2: command tx timeout
[   52.865216][   T54] Bluetooth: hci1: command tx timeout
[   53.002830][ T6168] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   53.017188][ T6173] syzkaller0: entered promiscuous mode
[   53.019067][ T6173] syzkaller0: entered allmulticast mode
[   53.151069][ T6180] netlink: 'syz.0.66': attribute type 1 has an invalid length.
[   53.198799][ T6188] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   53.210723][ T6188] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   53.274443][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'.
[   53.336871][ T6190] netlink: 20 bytes leftover after parsing attributes in process `syz.1.69'.
[   53.395131][ T6192] netlink: 'syz.1.70': attribute type 1 has an invalid length.
[   53.397768][ T6192] netlink: 'syz.1.70': attribute type 1 has an invalid length.
[   53.419996][ T6192] netlink: 100 bytes leftover after parsing attributes in process `syz.1.70'.
[   53.476001][ T6194] netlink: 'syz.0.71': attribute type 1 has an invalid length.
[   53.482994][ T6194] vlan2: entered promiscuous mode
[   53.485852][ T6194] vlan2: entered allmulticast mode
[   53.487992][ T6194] veth1_macvtap: entered allmulticast mode
[   53.527058][ T6192] netlink: 'syz.1.70': attribute type 1 has an invalid length.
[   53.583825][ T6192] vlan2: entered allmulticast mode
[   53.586043][ T6192] veth1: entered allmulticast mode
[   53.640073][ T6197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.72'.
[   53.640392][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.73'.
[   53.663123][ T6197] 8021q: adding VLAN 0 to HW filter on device bond2
[   53.786723][ T6205] netlink: 224 bytes leftover after parsing attributes in process `syz.2.75'.
[   53.814296][ T6207] bridge_slave_0: left allmulticast mode
[   53.816546][ T6207] bridge_slave_0: left promiscuous mode
[   53.818629][ T6207] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.822399][ T6207] bridge_slave_1: left allmulticast mode
[   53.824564][ T6207] bridge_slave_1: left promiscuous mode
[   53.826792][ T6207] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.830366][ T6207] bond0: (slave bond_slave_0): Releasing backup interface
[   53.834506][ T6207] bond0: (slave bond_slave_1): Releasing backup interface
[   53.838731][ T6207] team0: Port device team_slave_1 removed
[   53.841079][ T6207] batman_adv: batadv0: Removing interface: batadv_slave_0
[   53.844805][ T6207] batman_adv: batadv0: Removing interface: batadv_slave_1
[   53.852345][ T6207] rdma_op ffff8880284ac9f0 conn xmit_rdma 0000000000000000
[   53.857912][ T6207] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.860654][ T6207] bond0: (slave wlan1): Opening slave failed
[   53.962667][ T6215] netlink: 20 bytes leftover after parsing attributes in process `syz.2.79'.
[   54.031592][ T6219] ipvlan2: entered promiscuous mode
[   54.034189][ T6219] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   54.117678][ T6224] dvmrp8: entered allmulticast mode
[   54.130049][ T6224] dvmrp8: left allmulticast mode
[   54.685708][ T6245] ieee802154 phy0 wpan0: encryption failed: -22
[   54.756765][ T6257] team0: Mode changed to "loadbalance"
[   54.877004][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   54.895018][ T6272] syz_tun: entered allmulticast mode
[   54.909664][ T6272] dvmrp8: entered allmulticast mode
[   54.930678][ T6277] 8021q: VLANs not supported on wg1
[   54.957069][ T6272] syz_tun: left allmulticast mode
[   54.958961][ T6272] dvmrp8: left allmulticast mode
[   54.995006][ T6282] batadv0: entered promiscuous mode
[   54.998110][ T6282] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.063830][ T6284] 8021q: adding VLAN 0 to HW filter on device bond4
[   55.078439][ T6284] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   55.090835][ T6284] bond4: (slave macvlan2): Enslaving as a backup interface with an up link
[   55.099806][ T6284] bridge_slave_0: left allmulticast mode
[   55.101868][ T6284] bridge_slave_0: left promiscuous mode
[   55.108509][ T6284] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.112407][ T6284] bridge_slave_1: left allmulticast mode
[   55.115446][ T6284] bridge_slave_1: left promiscuous mode
[   55.117487][ T6284] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.122280][ T6284] bond0: (slave bond_slave_0): Releasing backup interface
[   55.128646][ T6284] bond0: (slave bond_slave_1): Releasing backup interface
[   55.133198][ T6284] team0: Port device team_slave_0 removed
[   55.136190][ T6284] team0: Port device team_slave_1 removed
[   55.138563][ T6284] batman_adv: batadv0: Removing interface: batadv_slave_0
[   55.141587][ T6284] batman_adv: batadv0: Removing interface: batadv_slave_1
[   55.146476][ T6284] bond4: (slave macvlan2): Releasing backup interface
[   55.241302][ T6306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   55.249661][ T6313] Bluetooth: MGMT ver 1.23
[   55.356775][ T6324] syzkaller0: entered promiscuous mode
[   55.358957][ T6324] syzkaller0: entered allmulticast mode
[   55.457805][ T6330] pim6reg1: entered promiscuous mode
[   55.459587][ T6330] pim6reg1: entered allmulticast mode
[   55.464542][ T6331] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   55.466906][ T6331] syzkaller0: entered promiscuous mode
[   55.468682][ T6331] syzkaller0: entered allmulticast mode
[   55.472946][ T6331] tipc: Resetting bearer <eth:syzkaller0>
[   55.481893][ T6332] tipc: Resetting bearer <eth:syzkaller0>
[   55.486979][ T6332] tipc: Disabling bearer <eth:syzkaller0>
[   55.692467][ T6348] IPVS: length: 24 != 1617152088
[   55.698790][ T6346] 8021q: adding VLAN 0 to HW filter on device bond5
[   55.811124][ T6360] 8021q: adding VLAN 0 to HW filter on device bond6
[   55.865225][ T6369] : entered promiscuous mode
[   55.954340][ T6372] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   55.957676][ T5850] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   55.961641][ T6373] 8021q: adding VLAN 0 to HW filter on device bond7
[   55.965717][ T6372] bond7 (unregistering): (slave ip6gretap1): Removing an active aggregator
[   55.969000][ T6372] bond7 (unregistering): (slave ip6gretap1): Releasing backup interface
[   55.972793][ T6372] bond7 (unregistering): Released all slaves
[   56.067478][ T6382] C: renamed from team_slave_0
[   56.070156][ T6382] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   56.085577][ T6382] vlan2: entered allmulticast mode
[   56.087487][ T6382] bridge0: entered allmulticast mode
[   56.089263][ T6382] bridge2: port 1(vlan2) entered blocking state
[   56.091306][ T6382] bridge2: port 1(vlan2) entered disabled state
[   56.094547][ T6382] vlan2: entered promiscuous mode
[   56.096240][ T6382] bridge0: entered promiscuous mode
[   56.196208][ T6377] Bluetooth: MGMT ver 1.23
[   56.264618][ T6396] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[   56.268506][ T6396] bond7: (slave vxcan3): Error -95 calling set_mac_address
[   56.379321][ T6407] validate_nla: 9 callbacks suppressed
[   56.379339][ T6407] netlink: 'syz.0.130': attribute type 6 has an invalid length.
[   56.459222][ T6421] netlink: 'syz.0.135': attribute type 11 has an invalid length.
[   56.465769][ T6421] __nla_validate_parse: 21 callbacks suppressed
[   56.465780][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'.
[   56.474323][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.135'.
[   56.477909][ T6421] netlink: 'syz.0.135': attribute type 18 has an invalid length.
[   56.511531][ T6425] netlink: 'syz.0.136': attribute type 1 has an invalid length.
[   56.530551][ T6425] bond8: entered promiscuous mode
[   56.538412][ T6425] 8021q: adding VLAN 0 to HW filter on device bond8
[   56.542180][ T6428] netlink: 'syz.1.137': attribute type 41 has an invalid length.
[   56.554208][ T6425] 8021q: adding VLAN 0 to HW filter on device bond8
[   56.557263][ T6425] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address
[   56.561547][ T6425] bond8: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[   56.570915][ T6425] bond8: (slave vxcan3): making interface the new active one
[   56.579873][ T6425] vxcan3: entered promiscuous mode
[   56.585980][ T6425] bond8: (slave vxcan3): Enslaving as an active interface with an up link
[   56.595627][ T6430] netlink: 'syz.1.138': attribute type 6 has an invalid length.
[   56.660197][ T6436] trusted_key: syz.1.140 sent an empty control message without MSG_MORE.
[   56.664876][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.140'.
[   56.852503][ T6438] syzkaller0: entered allmulticast mode
[   56.857211][ T6438] syzkaller0 (unregistering): left allmulticast mode
[   56.897582][ T6460] netlink: 16 bytes leftover after parsing attributes in process `syz.1.146'.
[   57.010150][ T6472] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   57.012575][ T6472] syzkaller0: entered promiscuous mode
[   57.014558][ T6472] syzkaller0: entered allmulticast mode
[   57.018374][ T6472] tipc: Resetting bearer <eth:syzkaller0>
[   57.020742][ T6470] tipc: Resetting bearer <eth:syzkaller0>
[   57.025128][ T6470] tipc: Disabling bearer <eth:syzkaller0>
[   57.032964][ T6473] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   57.036385][ T6473] syzkaller0: entered promiscuous mode
[   57.038143][ T6473] syzkaller0: entered allmulticast mode
[   57.042238][ T6473] tipc: Resetting bearer <eth:syzkaller0>
[   57.047741][ T6469] tipc: Resetting bearer <eth:syzkaller0>
[   57.050820][ T6469] tipc: Disabling bearer <eth:syzkaller0>
[   57.169919][ T6479] bond1: (slave geneve3): Releasing active interface
[   57.205957][ T6477] syzkaller0: entered allmulticast mode
[   57.217715][ T6476] syzkaller0: left allmulticast mode
[   57.224989][ T6479] ieee802154 phy0 wpan0: encryption failed: -22
[   57.227502][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.152'.
[   57.234949][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'.
[   57.242863][ T6479] team0: Mode changed to "loadbalance"
[   57.245323][ T6481] netlink: 24 bytes leftover after parsing attributes in process `syz.1.152'.
[   57.299164][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.155'.
[   57.334375][ T6492] can: request_module (can-proto-0) failed.
[   57.504416][ T6498] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.509651][ T6498] bond0: (slave rose0): Enslaving as an active interface with an up link
[   57.556270][ T6502] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   57.559036][ T6502] syzkaller0: entered promiscuous mode
[   57.561133][ T6502] syzkaller0: entered allmulticast mode
[   57.571424][ T6502] tipc: Resetting bearer <eth:syzkaller0>
[   57.732455][ T6522] netlink: 32 bytes leftover after parsing attributes in process `syz.0.161'.
[   57.756064][ T6525] pimreg: entered allmulticast mode
[   57.904268][ T6538] netlink: 72 bytes leftover after parsing attributes in process `syz.0.161'.
[   58.027004][ T6542] macvlan1: entered promiscuous mode
[   58.029748][ T6542] ipvlan0: entered promiscuous mode
[   58.034216][ T6542] ipvlan0: left promiscuous mode
[   58.036583][ T6542] macvlan1: left promiscuous mode
[   58.044474][ T6541] macvlan1: entered promiscuous mode
[   58.047311][ T6541] ipvlan0: entered promiscuous mode
[   58.050024][ T6541] ipvlan0: left promiscuous mode
[   58.052375][ T6541] macvlan1: left promiscuous mode
[   58.119152][ T6544] netlink: 'syz.2.165': attribute type 8 has an invalid length.
[   58.210118][ T6548] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   58.212860][ T6548] IPv6: NLM_F_CREATE should be set when creating new route
[   58.346966][ T6569] netlink: 'syz.2.173': attribute type 1 has an invalid length.
[   58.350558][ T6569] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   58.573284][ T5878] tipc: Node number set to 646436389
[   58.709922][ T6577] syzkaller1: entered promiscuous mode
[   58.712237][ T6577] syzkaller1: entered allmulticast mode
[   59.032757][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   59.115842][ T6579] syz_tun: entered allmulticast mode
[   59.120491][ T6579] dvmrp8: entered allmulticast mode
[   59.124597][ T6579] syz_tun: left allmulticast mode
[   59.126620][ T6579] dvmrp8: left allmulticast mode
[   59.185182][ T6583] netlink: 'syz.1.176': attribute type 23 has an invalid length.
[   59.465984][ T6589] hsr_slave_0: left promiscuous mode
[   59.469640][ T6589] hsr_slave_1: left promiscuous mode
[   59.532412][ T6599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   59.640115][ T6617] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   59.669956][ T6620] netlink: 'syz.0.189': attribute type 1 has an invalid length.
[   59.680504][ T6620] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   59.684880][ T6620] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   59.688438][ T6620] bond9: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[   59.714141][ T6623] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   59.716755][ T6623] IPv6: NLM_F_CREATE should be set when creating new route
[   59.719382][ T6623] IPv6: NLM_F_CREATE should be set when creating new route
[   59.722024][ T6623] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   60.131384][ T6639] tipc: Cannot configure node identity twice
[   60.158418][ T6643] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   60.161604][ T6643] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   60.203597][ T6650] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   60.209867][ T6650] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.212276][ T6650] syzkaller0: entered promiscuous mode
[   60.215171][ T6650] syzkaller0: entered allmulticast mode
[   60.219710][ T6649] tipc: Resetting bearer <eth:syzkaller0>
[   60.223769][ T6649] tipc: Disabling bearer <eth:syzkaller0>
[   60.316944][ T6658] netlink: 'syz.0.200': attribute type 1 has an invalid length.
[   60.337111][ T6660] syz_tun: entered allmulticast mode
[   60.344203][ T6660] dvmrp8: entered allmulticast mode
[   60.349673][ T6660] syz_tun: left allmulticast mode
[   60.351907][ T6660] dvmrp8: left allmulticast mode
[   60.465985][ T6671] syzkaller0: entered promiscuous mode
[   60.468523][ T6671] syzkaller0: entered allmulticast mode
[   60.751630][ T6689] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   61.093869][ T6712] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[   61.201360][ T6716] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.204654][ T6716] syzkaller0: entered promiscuous mode
[   61.206916][ T6716] syzkaller0: entered allmulticast mode
[   61.211004][ T6716] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   61.215464][ T6716] tipc: Resetting bearer <eth:syzkaller0>
[   61.218327][ T6715] tipc: Resetting bearer <eth:syzkaller0>
[   61.221175][ T6715] tipc: Disabling bearer <eth:syzkaller0>
[   61.299511][ T6721] bond0: (slave wlan1): Opening slave failed
[   61.425612][ T6725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.651785][ T6728] __nla_validate_parse: 27 callbacks suppressed
[   61.651797][ T6728] netlink: 20 bytes leftover after parsing attributes in process `syz.0.224'.
[   61.704452][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'.
[   61.780555][ T6737] netlink: 148 bytes leftover after parsing attributes in process `syz.0.227'.
[   61.897805][ T6745] 8021q: adding VLAN 0 to HW filter on device bond10
[   61.954257][ T6749] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   61.960176][ T6749] validate_nla: 1 callbacks suppressed
[   61.960187][ T6749] netlink: 'syz.0.231': attribute type 1 has an invalid length.
[   61.979575][ T6749] netlink: 'syz.0.231': attribute type 2 has an invalid length.
[   68.062765][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   71.283524][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   85.982769][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   89.223092][ T6749] netlink: 27 bytes leftover after parsing attributes in process `syz.0.231'.
[   92.617279][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   92.621515][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   92.625076][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   92.628569][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   92.631338][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   92.642501][ T6075] ==================================================================
[   92.645072][ T6075] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350
[   92.647531][ T6075] Read of size 8 at addr ffff88801ed100a0 by task khidpd_16bf5505/6075
[   92.650047][ T6075] 
[   92.650932][ T6075] CPU: 0 UID: 0 PID: 6075 Comm: khidpd_16bf5505 Not tainted syzkaller #0 PREEMPT(full) 
[   92.650962][ T6075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   92.650967][ T6075] Call Trace:
[   92.650971][ T6075]  <TASK>
[   92.650974][ T6075]  dump_stack_lvl+0x189/0x250
[   92.650988][ T6075]  ? __pfx_dump_stack_lvl+0x10/0x10
[   92.650996][ T6075]  ? lock_release+0x4b/0x3e0
[   92.651009][ T6075]  ? __virt_addr_valid+0x4a5/0x5c0
[   92.651020][ T6075]  print_report+0xca/0x240
[   92.651027][ T6075]  ? __mutex_lock+0x801/0x1350
[   92.651034][ T6075]  kasan_report+0x118/0x150
[   92.651044][ T6075]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   92.651054][ T6075]  ? __mutex_lock+0x801/0x1350
[   92.651062][ T6075]  __mutex_lock+0x801/0x1350
[   92.651069][ T6075]  ? __mutex_lock+0x5bb/0x1350
[   92.651075][ T6075]  ? l2cap_unregister_user+0x6a/0x1b0
[   92.651086][ T6075]  ? __pfx___mutex_lock+0x10/0x10
[   92.651092][ T6075]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   92.651102][ T6075]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   92.651112][ T6075]  l2cap_unregister_user+0x6a/0x1b0
[   92.651121][ T6075]  hidp_session_thread+0x3c9/0x410
[   92.651132][ T6075]  ? __pfx_hidp_session_thread+0x10/0x10
[   92.651140][ T6075]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   92.651149][ T6075]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   92.651159][ T6075]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   92.651168][ T6075]  ? __kthread_parkme+0x7b/0x200
[   92.651176][ T6075]  ? __kthread_parkme+0x1a1/0x200
[   92.651184][ T6075]  kthread+0x711/0x8a0
[   92.651193][ T6075]  ? __pfx_hidp_session_thread+0x10/0x10
[   92.651206][ T6075]  ? __pfx_kthread+0x10/0x10
[   92.651215][ T6075]  ? rcu_is_watching+0x15/0xb0
[   92.651223][ T6075]  ? __pfx_kthread+0x10/0x10
[   92.651231][ T6075]  ret_from_fork+0x3fc/0x770
[   92.651239][ T6075]  ? __pfx_ret_from_fork+0x10/0x10
[   92.651246][ T6075]  ? __switch_to_asm+0x39/0x70
[   92.651254][ T6075]  ? __switch_to_asm+0x33/0x70
[   92.651262][ T6075]  ? __pfx_kthread+0x10/0x10
[   92.651270][ T6075]  ret_from_fork_asm+0x1a/0x30
[   92.651281][ T6075]  </TASK>
[   92.651284][ T6075] 
[   92.725695][ T6075] Allocated by task 5840:
[   92.727500][ T6075]  kasan_save_track+0x3e/0x80
[   92.729388][ T6075]  __kasan_kmalloc+0x93/0xb0
[   92.731306][ T6075]  __kmalloc_noprof+0x27a/0x4f0
[   92.733251][ T6075]  hci_alloc_dev_priv+0x28/0x2060
[   92.734934][ T6075]  vhci_create_device+0x120/0x6e0
[   92.736756][ T6075]  vhci_write+0x3ce/0x4a0
[   92.738543][ T6075]  vfs_write+0x5c9/0xb30
[   92.740103][ T6075]  ksys_write+0x145/0x250
[   92.741732][ T6075]  do_syscall_64+0xfa/0x3b0
[   92.743492][ T6075]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.745442][ T6075] 
[   92.746263][ T6075] Freed by task 6626:
[   92.747591][ T6075]  kasan_save_track+0x3e/0x80
[   92.749300][ T6075]  kasan_save_free_info+0x46/0x50
[   92.751009][ T6075]  __kasan_slab_free+0x5b/0x80
[   92.752869][ T6075]  kfree+0x18e/0x440
[   92.754501][ T6075]  bt_host_release+0x82/0x90
[   92.756099][ T6075]  device_release+0x9c/0x1c0
[   92.757632][ T6075]  kobject_put+0x22b/0x480
[   92.759118][ T6075]  vhci_release+0x88/0xd0
[   92.760570][ T6075]  __fput+0x44c/0xa70
[   92.761872][ T6075]  task_work_run+0x1d4/0x260
[   92.763317][ T6075]  do_exit+0x6b5/0x2300
[   92.764647][ T6075]  do_group_exit+0x21c/0x2d0
[   92.766156][ T6075]  get_signal+0x1286/0x1340
[   92.767654][ T6075]  arch_do_signal_or_restart+0x9a/0x750
[   92.769551][ T6075]  exit_to_user_mode_loop+0x75/0x110
[   92.771695][ T6075]  do_syscall_64+0x2bd/0x3b0
[   92.773634][ T6075]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.776059][ T6075] 
[   92.776931][ T6075] Last potentially related work creation:
[   92.779252][ T6075]  kasan_save_stack+0x3e/0x60
[   92.781223][ T6075]  kasan_record_aux_stack+0xbd/0xd0
[   92.782986][ T6075]  insert_work+0x3d/0x330
[   92.784428][ T6075]  __queue_work+0xbaf/0xfb0
[   92.785931][ T6075]  queue_work_on+0x181/0x270
[   92.787495][ T6075]  process_scheduled_works+0xae1/0x17b0
[   92.789323][ T6075]  worker_thread+0x8a0/0xda0
[   92.790846][ T6075]  kthread+0x711/0x8a0
[   92.792217][ T6075]  ret_from_fork+0x3fc/0x770
[   92.793738][ T6075]  ret_from_fork_asm+0x1a/0x30
[   92.795342][ T6075] 
[   92.796152][ T6075] Second to last potentially related work creation:
[   92.798519][ T6075]  kasan_save_stack+0x3e/0x60
[   92.800108][ T6075]  kasan_record_aux_stack+0xbd/0xd0
[   92.801828][ T6075]  insert_work+0x3d/0x330
[   92.803268][ T6075]  __queue_work+0xcd2/0xfb0
[   92.804781][ T6075]  call_timer_fn+0x17e/0x5f0
[   92.806350][ T6075]  __run_timer_base+0x646/0x860
[   92.807967][ T6075]  run_timer_softirq+0xb7/0x180
[   92.809679][ T6075]  handle_softirqs+0x286/0x870
[   92.811568][ T6075]  __irq_exit_rcu+0xca/0x1f0
[   92.813236][ T6075]  irq_exit_rcu+0x9/0x30
[   92.814805][ T6075]  sysvec_apic_timer_interrupt+0xa6/0xc0
[   92.816988][ T6075]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   92.819065][ T6075] 
[   92.819859][ T6075] The buggy address belongs to the object at ffff88801ed10000
[   92.819859][ T6075]  which belongs to the cache kmalloc-8k of size 8192
[   92.824189][ T6075] The buggy address is located 160 bytes inside of
[   92.824189][ T6075]  freed 8192-byte region [ffff88801ed10000, ffff88801ed12000)
[   92.828680][ T6075] 
[   92.829490][ T6075] The buggy address belongs to the physical page:
[   92.831582][ T6075] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ed10
[   92.834407][ T6075] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   92.837342][ T6075] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   92.840365][ T6075] page_type: f5(slab)
[   92.842021][ T6075] raw: 00fff00000000040 ffff88801a442280 ffffea0000a68000 0000000000000004
[   92.845406][ T6075] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[   92.848853][ T6075] head: 00fff00000000040 ffff88801a442280 ffffea0000a68000 0000000000000004
[   92.852492][ T6075] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[   92.855968][ T6075] head: 00fff00000000003 ffffea00007b4401 00000000ffffffff 00000000ffffffff
[   92.859416][ T6075] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[   92.862847][ T6075] page dumped because: kasan: bad access detected
[   92.865503][ T6075] page_owner tracks the page as allocated
[   92.867853][ T6075] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5588, tgid 5588 (dhcpcd), ts 40576972280, free_ts 27985004597
[   92.875402][ T6075]  post_alloc_hook+0x240/0x2a0
[   92.877004][ T6075]  get_page_from_freelist+0x21e4/0x22c0
[   92.879001][ T6075]  __alloc_frozen_pages_noprof+0x181/0x370
[   92.880963][ T6075]  alloc_pages_mpol+0x232/0x4a0
[   92.882571][ T6075]  allocate_slab+0x8a/0x370
[   92.884380][ T6075]  ___slab_alloc+0xbeb/0x1410
[   92.886147][ T6075]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[   92.888291][ T6075]  kmalloc_reserve+0x136/0x290
[   92.889879][ T6075]  __alloc_skb+0x142/0x2d0
[   92.891471][ T6075]  netlink_dump+0x167/0xe90
[   92.893110][ T6075]  netlink_recvmsg+0x676/0xa30
[   92.895103][ T6075]  sock_recvmsg+0x22c/0x270
[   92.896995][ T6075]  ____sys_recvmsg+0x1c9/0x460
[   92.898971][ T6075]  ___sys_recvmsg+0x1b5/0x510
[   92.900602][ T6075]  __x64_sys_recvmsg+0x198/0x260
[   92.902267][ T6075]  do_syscall_64+0xfa/0x3b0
[   92.903843][ T6075] page last free pid 5305 tgid 5305 stack trace:
[   92.905907][ T6075]  __free_frozen_pages+0xbc4/0xd30
[   92.907611][ T6075]  __put_partials+0x156/0x1a0
[   92.909168][ T6075]  put_cpu_partial+0x17c/0x250
[   92.910740][ T6075]  __slab_free+0x2d5/0x3c0
[   92.912204][ T6075]  qlist_free_all+0x97/0x140
[   92.913898][ T6075]  kasan_quarantine_reduce+0x148/0x160
[   92.915705][ T6075]  __kasan_slab_alloc+0x22/0x80
[   92.917646][ T6075]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[   92.919474][ T6075]  getname_flags+0xb8/0x540
[   92.921234][ T6075]  do_readlinkat+0xbc/0x500
[   92.923082][ T6075]  __x64_sys_readlink+0x7f/0x90
[   92.925127][ T6075]  do_syscall_64+0xfa/0x3b0
[   92.926764][ T6075]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.928729][ T6075] 
[   92.929559][ T6075] Memory state around the buggy address:
[   92.931430][ T6075]  ffff88801ed0ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   92.934492][ T6075]  ffff88801ed10000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   92.937765][ T6075] >ffff88801ed10080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   92.941069][ T6075]                                ^
[   92.942959][ T6075]  ffff88801ed10100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   92.945729][ T6075]  ffff88801ed10180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   92.948310][ T6075] ==================================================================
[   92.951407][ T6075] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   92.953773][ T6075] CPU: 0 UID: 0 PID: 6075 Comm: khidpd_16bf5505 Not tainted syzkaller #0 PREEMPT(full) 
[   92.956965][ T6075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   92.960257][ T6075] Call Trace:
[   92.961373][ T6075]  <TASK>
[   92.962350][ T6075]  dump_stack_lvl+0x99/0x250
[   92.963857][ T6075]  ? __asan_memcpy+0x40/0x70
[   92.965372][ T6075]  ? __pfx_dump_stack_lvl+0x10/0x10
[   92.967093][ T6075]  ? __pfx__printk+0x10/0x10
[   92.968642][ T6075]  vpanic+0x281/0x750
[   92.970312][ T6075]  ? __pfx_vpanic+0x10/0x10
[   92.972115][ T6075]  ? rcu_is_watching+0x15/0xb0
[   92.973874][ T6075]  panic+0xb9/0xc0
[   92.975307][ T6075]  ? __pfx_panic+0x10/0x10
[   92.976827][ T6075]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[   92.979225][ T6075]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   92.981172][ T6075]  ? __mutex_lock+0x801/0x1350
[   92.982756][ T6075]  check_panic_on_warn+0x89/0xb0
[   92.984428][ T6075]  ? __mutex_lock+0x801/0x1350
[   92.986026][ T6075]  end_report+0x78/0x160
[   92.987472][ T6075]  kasan_report+0x129/0x150
[   92.989045][ T6075]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   92.991013][ T6075]  ? __mutex_lock+0x801/0x1350
[   92.992592][ T6075]  __mutex_lock+0x801/0x1350
[   92.994082][ T6075]  ? __mutex_lock+0x5bb/0x1350
[   92.995623][ T6075]  ? l2cap_unregister_user+0x6a/0x1b0
[   92.997367][ T6075]  ? __pfx___mutex_lock+0x10/0x10
[   92.999119][ T6075]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   93.001467][ T6075]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   93.003411][ T6075]  l2cap_unregister_user+0x6a/0x1b0
[   93.005139][ T6075]  hidp_session_thread+0x3c9/0x410
[   93.006845][ T6075]  ? __pfx_hidp_session_thread+0x10/0x10
[   93.008988][ T6075]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   93.010925][ T6075]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   93.013031][ T6075]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   93.015099][ T6075]  ? __kthread_parkme+0x7b/0x200
[   93.016772][ T6075]  ? __kthread_parkme+0x1a1/0x200
[   93.018572][ T6075]  kthread+0x711/0x8a0
[   93.020118][ T6075]  ? __pfx_hidp_session_thread+0x10/0x10
[   93.022018][ T6075]  ? __pfx_kthread+0x10/0x10
[   93.023693][ T6075]  ? rcu_is_watching+0x15/0xb0
[   93.025566][ T6075]  ? __pfx_kthread+0x10/0x10
[   93.027357][ T6075]  ret_from_fork+0x3fc/0x770
[   93.029053][ T6075]  ? __pfx_ret_from_fork+0x10/0x10
[   93.030819][ T6075]  ? __switch_to_asm+0x39/0x70
[   93.032454][ T6075]  ? __switch_to_asm+0x33/0x70
[   93.034333][ T6075]  ? __pfx_kthread+0x10/0x10
[   93.036281][ T6075]  ret_from_fork_asm+0x1a/0x30
[   93.038276][ T6075]  </TASK>
[   93.040309][ T6075] Kernel Offset: disabled
[   93.042143][ T6075] Rebooting in 86400 seconds..

VM DIAGNOSIS:
05:36:32  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000464f370
R8 =ffff88801fe80237 R9 =1ffff11003fd0046 R10=dffffc0000000000 R11=ffffffff854f2340
R12=dffffc0000000000 R13=ffffffff99afb8ef R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f23bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055b9761c4f48 CR3=0000000022df4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=6f6f7465756c622f 6c6175747269762f XMM01=ffffffffffffffff ffffffffffffffff
XMM02=3030323a32696368 2f326963682f6874 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000151 000000002d316c00
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffff000000ff XMM09=0000000000000151 0000000036316c00
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff920006b1ea7 RBX=ffffffff82391a6c RCX=0eafd79e70c0d300 RDX=0000000000000000
RSI=ffffffff8be33660 RDI=ffffffff8be33620 RBP=dffffc0000000000 RSP=ffffc9000358f418
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc9000358f538 R11=ffffffff81ac3810
R12=1ffff920006b1e9d R13=ffffc9000358f538 R14=ffffc9000358f4e8 R15=ffffffff8172c195
RIP=ffffffff8172c221 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555652f500 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005604a65ec7e8 CR3=0000000023fc8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
